$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/KplqLEeEvHulITc_68SAkNAv9rU.roa File: KplqLEeEvHulITc_68SAkNAv9rU.roa (raw, json) Hash identifier: XeIvE37aB7BKrd3U95/HSy8KU5Lpb5hB9OMu03OZoFs= Subject key identifier: 2A:99:6A:2C:47:84:BC:7B:A5:21:37:3F:EB:C4:80:90:D0:2F:F6:B5 Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Certificate serial: A7 Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KplqLEeEvHulITc_68SAkNAv9rU.roa Signing time: Fri 06 Jun 2025 02:21:22 +0000 ROA not before: Fri 06 Jun 2025 02:21:22 +0000 ROA not after: Wed 27 May 2026 07:38:41 +0000 asID: 24547 IP address blocks: 240a:40c0:c010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D Validity Not Before: Jun 6 02:21:22 2025 GMT Not After : May 27 07:38:41 2026 GMT Subject: CN=2A996A2C4784BC7BA521373FEBC48090D02FF6B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7b:fe:23:50:37:cd:59:a2:c2:f3:83:8b:bf: 69:87:84:40:96:18:62:03:bd:52:e4:28:71:e3:74: f3:99:c6:0c:88:0b:e2:d2:47:2d:89:a9:41:f1:3a: c3:af:61:15:3c:c8:40:ca:74:ff:f6:5e:af:c8:d2: 63:60:22:da:de:d9:62:ad:0e:32:f9:b7:44:28:bc: 06:31:e6:63:6c:1a:4d:f9:39:55:a7:0b:98:47:46: 92:2c:71:70:64:5a:b5:8c:9e:c9:73:56:c3:da:e8: 88:55:62:9c:db:be:b0:80:42:3b:96:ad:d9:54:60: bf:8b:8f:f7:a0:46:2b:d2:9a:a8:82:c5:f0:b7:94: a7:60:34:af:6b:36:e3:e5:48:2b:bf:06:e5:70:28: ec:3b:ca:1a:d1:fb:00:38:b3:80:43:c3:89:2a:6d: 01:6e:be:a9:8f:36:a2:4a:18:00:f6:28:0a:c3:6b: 63:33:b9:ce:34:34:e3:ff:57:53:ea:45:a6:7a:d3: 36:41:4a:3e:3f:30:c5:d2:1a:21:20:97:b0:70:fd: 03:c2:68:4b:f0:9b:f2:58:42:f4:82:f2:4b:fd:5b: 00:32:c7:07:30:ec:56:e7:17:3b:05:29:a3:e5:51: 9a:c6:4e:86:ed:9e:06:aa:15:6f:be:ac:43:0c:42: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:99:6A:2C:47:84:BC:7B:A5:21:37:3F:EB:C4:80:90:D0:2F:F6:B5 X509v3 Authority Key Identifier: keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KplqLEeEvHulITc_68SAkNAv9rU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 240a:40c0:c010::/44 Signature Algorithm: sha256WithRSAEncryption 7a:99:b4:91:d4:49:8b:47:ee:7d:57:08:11:39:ca:0d:fc:dd: da:73:19:53:1d:82:ff:bc:4e:78:d8:af:ca:46:0f:99:59:63: fa:33:a7:05:7a:07:2d:e4:5f:ab:4e:77:9b:cb:3b:88:4f:bf: 91:1d:b7:f8:74:6a:c1:7a:60:31:48:7c:d6:18:e8:fa:02:54: 9a:27:b7:01:86:ab:0b:5e:96:a6:32:f3:8b:11:ab:54:4e:03: 2d:d4:77:84:f2:24:f6:12:98:6a:03:b5:1f:39:d6:d1:47:a3: 47:d1:f1:5b:91:e1:d3:9e:9e:b4:51:ed:ee:bc:32:35:1e:60: 78:ed:24:46:b1:27:49:e3:84:20:d5:41:c1:56:21:b6:b3:c9: db:18:80:c8:23:45:2a:66:0b:59:b3:3b:25:63:14:9b:10:a5: 49:5c:2d:c0:5b:e2:15:56:10:c3:02:06:db:8b:5a:bf:88:34: 51:fd:3f:e0:fa:91:3b:7a:3d:51:2f:61:da:e9:a6:74:fd:ac: e5:10:e9:c8:9b:91:ae:9b:13:95:f0:86:e4:aa:12:e9:8f:be: 45:9b:37:44:22:6b:2e:c4:f6:70:df:99:7d:d8:c8:9c:cd:92: 74:74:e2:29:e5:f9:66:27:e0:8b:10:c7:d3:b0:aa:15:2f:14: 71:c9:48:a3 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRF RkY3MzkyRTFFREMxMjI1RkM0Q0ZCOEZBQjZFQjYxN0E5RDI0RDAeFw0yNTA2MDYw MjIxMjJaFw0yNjA1MjcwNzM4NDFaMDMxMTAvBgNVBAMTKDJBOTk2QTJDNDc4NEJD N0JBNTIxMzczRkVCQzQ4MDkwRDAyRkY2QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwe/4jUDfNWaLC84OLv2mHhECWGGIDvVLkKHHjdPOZxgyIC+LS Ry2JqUHxOsOvYRU8yEDKdP/2Xq/I0mNgItre2WKtDjL5t0QovAYx5mNsGk35OVWn C5hHRpIscXBkWrWMnslzVsPa6IhVYpzbvrCAQjuWrdlUYL+Lj/egRivSmqiCxfC3 lKdgNK9rNuPlSCu/BuVwKOw7yhrR+wA4s4BDw4kqbQFuvqmPNqJKGAD2KArDa2Mz uc40NOP/V1PqRaZ60zZBSj4/MMXSGiEgl7Bw/QPCaEvwm/JYQvSC8kv9WwAyxwcw 7FbnFzsFKaPlUZrGTobtngaqFW++rEMMQjYRAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUKplqLEeEvHulITc/68SAkNAv9rUwHwYDVR0jBBgwFoAUlO/3OS4e3BIl/Ez7 j6tuthep0k0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3 Mi9sT18zT1M0ZTNCSWxfRXo3ajZ0dXRoZXAwazAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzIvS3BscUxFZUV2SHVs SVRjXzY4U0FrTkF2OXJVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHBCQKQMDAEDANBgkqhkiG9w0BAQsFAAOCAQEAepm0kdRJi0fufVcIETnKDfzd 2nMZUx2C/7xOeNivykYPmVlj+jOnBXoHLeRfq053m8s7iE+/kR23+HRqwXpgMUh8 1hjo+gJUmie3AYarC16WpjLzixGrVE4DLdR3hPIk9hKYagO1HznW0UejR9HxW5Hh 056etFHt7rwyNR5geO0kRrEnSeOEINVBwVYhtrPJ2xiAyCNFKmYLWbM7JWMUmxCl SVwtwFviFVYQwwIG24tav4g0Uf0/4PqRO3o9US9h2ummdP2s5RDpyJuRrpsTlfCG 5KoS6Y++RZs3RCJrLsT2cN+ZfdjInM2SdHTiKeX5ZifgixDH07CqFS8UcclIow== -----END CERTIFICATE-----Generated at Mon Jun 9 20:24:23 2025 by rpki-client